Appl. No. 09/787,648 

Amdt. dated June 23, 2006 

Reply to Office Action of Jan. 11, 2006 

Amendments to the Claims : 

This listing of claims will replace all prior 
versions and listings of claims in the application: 

Listing of Claims : 

Claims 1-32 (canceled) 

1 Claim 33 (currently amended) : A method for 

2 cryptographically processing data, comprising the steps of: 

3 a) feeding, to a cryptographic process (P) , values of 

4 data (X) and a key (K) ; 

5 b) performing the cryptographically process (P) to yield 

6 cryptographically processed output data (Y) ; 

7 C) feeding, to the process (P) , auxiliary values that 

8 mask the data (X) used in the process (P) ; and 

9 d) compensating, by an auxiliary process, influence of 

10 the auxiliary values on the output data (Y) such that the 

11 output data (Y) remains unaffected regardless of whether the 

12 data (X) is masked through use of the auxiliary values or 

13 not . 



1 Claim 34 (currently amended) : A method for cryptographically 

2 processing data, comprising the steps of: 

3 a) feeding, to a cryptographic process (P) , values of data 

4 (X) and a key (K) ; 

5 b) performing the cryptographic process (P) to yield 

6 cryptographically processed output data (Y) ; 

7 c) feeding, to an invert ible supplementary process (P*) , a 

8 supplementary key (K*) in order to form the key (K) ; and 

9 d) wherein: 
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10 the supplementary key (K*) masks the key (K) used 

11 in the process (P) ; and 

12 the supplementary process (P*) comprises a 

13 cryptographic process to which an auxiliary key (K' ) is fedj_ 

14 and 

15 the supplementary key (K*) is obtained from a 

16 process that is inverse to the supplementary process (P*) 

17 and based on the key (K) and the auxiliary key (K' ) . 

Claim 35 (canceled) 

1 Claim 3 6 (previously presented) : A method for 

2 cryptograph! cally processing data, comprising the steps of: 

3 a) feeding, to a cryptographic process (P) , values of 

4 data (X) and a key (K) ; 

5 b) performing the cryptographic process (P) in order to 

6 form cryptographically processed output data (Y) ; 

7 c) feeding, to an supplementary process (P*) , a 

8 supplementary key (K*) in order to form the key (K) ; 

9 d) wherein: 

10 the supplementary key (K*) masks the key (K) used 

11 in the process (P) ; 

12 the supplementary process (P*) comprises a 

13 cryptographic process to which an auxiliary key (K' ) is fed; 

14 the data (X) is also fed to the supplementary 

15 process (P*) ; and 

16 the supplementary process (P*) is performed only 

17 if the data (X) has predetermined properties. 

1 Claim 37 (previously presented) : The method recited in 

2 claim 33 wherein the cryptographic process (P) comprises a 

3 number of steps (Si) , each of said steps (Si) having a 
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4 cryptographic operation for processing right-hand data (RDi) 

5 derived from the data (X) , so as to yield processed 

6 right-hand data (FDi) , and a combinatory operation (CCi) for 

7 combining with left-hand data (LDi) , also derived from the 

8 data (X) , and the processed right-hand data (FDi) in order 

9 to form modified left data (SDi'), and wherein right-hand 

10 data (RDi) is combined with a primary auxiliary value (Ai) 

11 prior to a first one of the steps (Si) and left-hand data 

12 (LDi) is combined with an additional auxiliary value (Aq) . 

1 Claim 38 (previously presented) : The method recited in 

2 claim 3 7 wherein immediately after a last one of the steps 

3 (S n ) , right-hand data (RD n ) is combined with a further 

4 primary auxiliary value (A n ) and modified left-hand data 

5 (SDn 1 ) is combined with a further additional auxiliary value 

6 (A n+1 ) . 

1 Claim 39 (previously presented) : The method recited in claim 

2 37 wherein the right-hand data (RDi) is combined, in each 

3 one of the steps (Si) and prior to a cryptographic operation 

4 (Fi) , with a primary auxiliary value (Ai) of said one step 

5 (Si) . 

1 Claim 40 (previously presented) : The method recited in claim 

2 37 wherein the processed right-hand data (FDi) is combined, 

3 following a cryptographic operation (Fi) , with a secondary 

4 auxiliary value (Bi) of said one step (Si) . 

1 Claim 41 (previously presented) : The method recited in 

2 claim 40 wherein the secondary auxiliary value (Bi) of one 

3 of the steps (Si) is formed from a combination of a primary 
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4 auxiliary value (Ai_i) of a preceding one of the steps and a 

5 primary auxiliary value (Ai+i) of a next one of the steps. 

1 Claim 42 (previously presented) : The method recited in 

2 claim 37 wherein all primary auxiliary values (Ai) are 

3 equal . 

1 Claim 43 (previously presented) : The method recited in 

2 claim 3 8 wherein the primary auxiliary values (Ai) or 

3 secondary auxiliary values (Bi) have been previously 

4 combined each time with a respective cryptographic 

5 operation (Fi' ) . 

1 Claim 44 (previously presented) : The method recited in claim 

2 43 wherein a combined cryptographic operation (Fi' ) 

3 contains a plurality of tables; and the tables are 

4 determined in a different order each time the cryptographic 

5 process (P) is performed. 

1 Claim 45 (previously presented) : The method recited in 

2 claim 43 wherein a combined cryptographic operation (Fi' ) 

3 contains a plurality of tables; and the elements of the 

4 tables are determined or stored in a different order each 

5 time the cryptographic process (P) is performed. 

1 Claim 46 (previously presented) : The method recited in 

2 claim 45 wherein the order is stored as a lookup table. 

1 Claim 47 (previously presented) : The method recited in 

2 claim 37 wherein the right-hand data (RDi) is combined with a 

3 tertiary auxiliary value (Wi) after each one of the steps (Si) . 
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1 Claim 48 (previously presented) : The method recited in 

2 claim 47 wherein the tertiary auxiliary value (Wi) in all 

3 steps, except the last one of said steps (S n ) , equals a 

4 combination of the primary auxiliary value (Ai) of the first 

5 one of the steps (Si) and the additional auxiliary value (A 0 ) ; 

6 and in the last one of the steps (S n ) the tertiary auxiliary 

7 value equals zero. 

1 Claim 49 (previously presented) : The method recited in 

2 claim 37 wherein combining is performed through an 

3 exclusive-OR (XOR) operation. 

1 Claim 50 (previously presented) : The method recited in 

2 claim 33 wherein the data (X) comprises identification data 

3 of a payment device; and the processed data (Y) forms a 

4 diversified key. 

1 Claim 51 (previously presented) : The method recited in 

2 claim 33 wherein the cryptographic process (P) comprises a 

3 DES process. 

1 Claim 52 (previously presented) : The method recited in 

2 claim 51, wherein the DES process comprises triple DES. 

1 Claim 53 (previously presented) : A circuit for performing 

2 the method recited in claim 33. 

1 Claim 54 (previously presented) : A payment card having the 

2 circuit recited in claim 53 . 

1 Claim 55 (previously presented) : A payment terminal having 

2 the circuit recited in claim 53. 
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1 Claim 56 (previously presented) : The method recited in 

2 claim 34 wherein the data (X) comprises identification data 

3 of a payment device; and the processed data (Y) forms a 

4 diversified key. 

1 Claim 57 (previously presented) : The method recited in 

2 claim 34 wherein the cryptographic process (P) comprises a 

3 DES process. 

1 Claim 58 (previously presented) : The method recited in 

2 claim 57 wherein the DES process comprises triple DES. 

1 Claim 59 (previously presented) : A circuit for performing 

2 the method recited in claim 34. 

1 Claim 60 (previously presented) : A payment card having the 

2 circuit recited in claim 59. 

1 Claim 61 (previously presented) : A payment terminal having 

2 the circuit recited in claim 59. 

1 Claim 62 (previously presented) : The method recited in 

2 claim 36 wherein the data (X) comprises identification data 

3 of a payment device; and the processed data (Y) forms a 

4 diversified key. 

1 Claim 63 (previously presented) : The method recited in 

2 claim 36 wherein the cryptographic process (P) comprises a 

3 DES process. 

1 Claim 64 (previously presented) : The method recited in 

2 claim 63 wherein the DES process comprises triple DES. 
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Claim 65 (previously presented) : A circuit for performing 
the method recited in claim 36. 

Claim 66 (previously presented) : A payment card having the 
circuit recited in claim 65. 

Claim 67 (previously presented) : A payment terminal having 
the circuit recited in claim 65. 
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